Equifax data breach: Only Canadians with dealings in U.S. likely affected

Click to play video: 'Equifax reportedly knew for months about cyber-security vulnerability'
Equifax reportedly knew for months about cyber-security vulnerability
WATCH ABOVE: Equifax reportedly had two months to prevent its massive data breach, but failed to install a software fix. – Sep 15, 2017

TORONTO – Equifax Canada‘s customer service agents are telling callers that only Canadians who have had dealings in the United States are likely to be affected by the massive hack announced last week.

The credit monitoring company’s call centre staff say that Canadians who have Equifax accounts in the U.S. could be at risk of having their data compromised, such as those who have lived, worked or applied for credit south of the border.

READ MORE: Equifax data breach catches attention of Canada’s privacy commissioner

The Canadian Press made multiple calls as consumers to Equifax Canada’s customer service line and were told that consumers whose credit files were not checked outside of Canada are unlikely to be part of any breach.

Equifax Canada did not immediately respond to requests for comment.

Story continues below advertisement

Equifax Inc. said last Thursday a security breach occurred over the summer that compromised the private information of up to 143 million Americans, along with an undisclosed number of Canadians. But the company has been tight-lipped about further details, including how many Canadians may have been exposed.

Equifax Canada’s website says that “only a limited number of Canadians may have been affected” and “the breach is contained.”

Breaking news from Canada and around the world sent to your email, as it happens.

“We are working night and day to assess what happened,” the credit monitoring company says on its Canadian website.

The Canadian breach may have impacted names, addresses and social insurance numbers, Equifax added.

READ MORE: Class action lawsuits filed against Equifax for data breach, ‘bogus’ arbiration clause waived

Canada’s privacy commissioner has said it has prioritized an examination into the hack to ensure that Canadians’ information are protected by future risks.

Canadian and American credit files must be kept separate due to differences in the various laws within the U.S. and Canada, according to the Equifax Canada website.

However, American companies can pull Canadians’ files in Canada with consumers’ permission, according to credit risk expert Mike Morley.

“Let’s say you’re a Canadian applying for a mortgage in the U.S. for your cottage… They will make a decision based on your Canadian credit information,” Morley said.

Story continues below advertisement

That would generate a U.S. credit file for the consumer, he said.

Morley added that Canadians who live and work south of the border would have their credit history pulled in Canada in various situations, including when applying for a credit card, or even by a potential employer or landlord.

Equifax has set up a dedicated website,, and call centre to help consumers determine if their information has been compromised.

However, Canada’s privacy watchdog says the website won’t help Canadians because it uses U.S. social security numbers.

READ MORE: Equifax data breach: tips for Canadians whose info may have been hacked

Instead, the privacy commissioner suggests that Canadians call Equifax at 1-866-828-5961 (English service) or 1-877-323-2598 (French service).

At least two proposed class action lawsuits have been started on behalf of Canadians who may have been affected by the hack.

Tony Merchant, the founder of Merchant Law Group, says he has filed proposed class actions on behalf of plaintiffs in British Columbia, Saskatchewan, Ontario and Quebec. The four plaintiffs checked their files on Equifax’s American website – which asks for last names and U.S. social security numbers – and were told their data may have been divulged, he added.

Story continues below advertisement

Merchant’s law firm, which has offices in Edmonton and Calgary, has seen more than 700 Canadians sign up to be part of the class action.

A spokeswoman for the Canadian Anti-Fraud Centre, which is the central agency in Canada, that collects identification theft complaints and other related matters, has not received any complaints in connection with the Equifax hack.

Sponsored content